Network Security

Hi, One of my FMCs is stuck in "firepower system processes are starting please wait" mode after I broke the HA cluster to rectify an issue.   I think the database is corrupt, but I wanted to try and restore the appliance from one of the save backup f...

Current set up is rv042 to checkpoint fw to external network. I am to replace rv042 with rv340. I already made the same config for rv340 (access policy, static routing). The problem: using the packet tracer of checkpoint fw, i noticed that the intern...

Hi.I post these question here because after a lot of searching, I stumble upon the lack of good material about this subject. In a WLC (Wireless Lan Controller) central switching scenario:Imagine I have a very secure (RADIUS/802.1x) lan vlan data subn...

On Monday I  was able to  run  ASDM on my PC but last days it crashed.   So I’m using Java 7 update 79. I added the ip address of the asa to the exception list and imported the ASA certificate into  Java as well in trusted root authorities store  in ...

I need some help to write a playbook to upgrade cisco ASA. - gather facts like ios_facts - compare current image with the new image- copy image to flash- change boot sequence-reload Thanks 

Good morning all,if there any way to configure a snmp trap for a single interface if the used bandwidth is xxx Mb or 60% ?My ASA 5555 software is 9.8(3)21

Hi Everyone, We are using FTD version 6.4 to test the integration feature  with Cisco Threat Response(CTR). But Configuration Guides(FTD version 6.4) say only the intrusion events can be sent for investigation to CTR. This feature was available in FT...

Need help with below Firewall rule change request: Please allow the following UDP for outgoing only: No Type Port Usage 1 Local port 9443 Required for Agent local services 2 Local port 15011 No Protocol External host communications port Usage 1 HTTPS...

I see this when doing "UDP PAT pool management, address X.X.X.X, range 1024-65535, allocated 5"show nat pool" on a Firepower but don't see any NAT statements for this under NAT.

hello dearscan somebody please describe what is the HA bundle devices, is it two devices, a license or what? in example 4120 HA bundle? and any document, please.and also what is the subscription 4120 best regards

Hello, Is there a REST API (e.g. for Firepower Managment Console, etc) that will allow you to add/remove custom Snort signatures/IDS Rules on a Firepower IDS? What about IPs to detect/block on? The closest I found was "PUT Inidicator" for the Firepow...

Hello all, As a network engineer working on a project to deploy and configure a series of ASA 5506-X running 9.9(2) iOS, I have encountered the following important issue:When I configure a NAT Exempt rule for traffic flowing from one zone to another ...